Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: iF0/vv/hEp5h0SQ0TFAwPCI6rEG4xIiN0SiM1McGUoU=
Subject key identifier: 89:99:7E:AA:A4:E0:3E:5A:E0:96:0E:2A:3F:55:47:C8:91:E5:99:C4
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 019A269D259D7363F2719710F5F0766877B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 0402
Signing time: Mon 27 Oct 2025 17:00:24 +0000
Manifest this update: Mon 27 Oct 2025 17:00:24 +0000
Manifest next update: Tue 28 Oct 2025 17:00:24 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: 1sYg0TZJLdB4SIfrvwnizIKZgMOme9pMGKYn7/PYfog=)
2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=)
3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=)
4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:25:9d:73:63:f2:71:97:10:f5:f0:76:68:77:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Oct 27 17:00:24 2025 GMT
Not After : Oct 28 17:00:24 2025 GMT
Subject: CN=89997eaaa4e03e5ae0960e2a3f5547c891e599c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:db:52:cf:9e:96:c7:99:c1:c7:17:d7:d0:
1e:e2:eb:96:0e:ea:c6:88:8e:1a:2e:03:bb:41:b9:
1e:10:ec:61:08:05:8b:96:2b:6c:c3:c7:17:36:f0:
f0:cd:4b:a9:0f:9e:d2:f7:c7:3d:d0:3e:6e:58:91:
20:9b:45:18:d4:c0:82:ae:d6:c7:84:0e:94:29:2a:
21:75:ca:06:1c:7c:ce:54:7a:5f:07:2d:62:8e:d0:
f0:6b:37:e0:9e:73:68:36:83:0b:ec:e6:35:b0:fc:
bd:e8:71:02:da:16:a0:95:6c:be:f0:14:18:f4:d8:
e3:da:6f:71:45:66:b1:f5:41:47:e2:3d:ea:74:6a:
da:2d:87:b1:3d:2b:c9:7d:de:c7:ec:e4:11:b0:71:
29:77:f3:67:97:7d:01:e1:9b:6c:31:11:02:e6:21:
af:43:cc:f5:f8:7c:23:a5:bc:6d:b2:cd:ca:dc:00:
6e:ea:00:5c:4e:24:c7:d4:ec:6b:4a:4e:9e:a9:94:
5d:54:1e:46:db:f3:79:1a:27:ea:70:5d:69:19:86:
bd:df:55:fd:1d:d0:e1:ff:5d:61:68:56:09:07:92:
7e:04:04:3c:c4:1f:50:05:3f:54:82:99:91:71:ba:
46:5a:e0:27:aa:fe:2f:64:30:7d:ae:3a:80:46:d2:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:7E:AA:A4:E0:3E:5A:E0:96:0E:2A:3F:55:47:C8:91:E5:99:C4
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:76:67:21:91:08:e7:31:83:8b:5e:f1:10:7e:d7:73:97:99:
a2:f0:4f:24:c8:81:65:67:07:40:02:2d:ec:b4:8a:3b:00:7c:
02:bd:11:0d:c2:b1:fb:50:97:e4:94:eb:8f:a5:9f:8b:5f:76:
4a:8c:ac:d3:12:4c:2e:3f:d7:dd:a1:94:2d:a8:d9:59:09:9a:
25:ce:4d:5e:3c:31:23:19:8a:bf:f7:91:92:5e:33:6c:0c:56:
32:77:f6:3d:8e:ff:df:77:17:44:8e:d6:81:a8:28:68:70:a1:
dc:11:1c:45:2a:a1:d2:1e:ae:c5:27:2d:95:1d:0e:1f:92:56:
0f:79:53:d8:00:61:ee:b5:62:6d:dd:3e:b2:a1:4e:57:1a:d2:
34:92:4e:73:9f:56:df:fb:52:0e:34:06:f5:09:47:14:79:d6:
4e:c6:b8:69:92:0c:e0:2f:8e:9d:b5:36:40:eb:88:1d:d1:c2:
75:1e:77:18:ca:dd:3a:54:5c:05:d8:be:37:56:dc:63:bc:90:
18:4e:81:ef:17:dc:83:25:60:b7:9f:c6:25:81:0e:7b:3b:ca:
58:cb:9a:78:03:31:c1:8e:e2:bf:fc:01:1e:6f:5d:ea:7c:6c:
5e:55:38:e3:54:ed:13:6e:70:ac:82:1c:1b:a5:ab:e0:48:28:
33:35:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:03:46 2025 by rpki-client